Security Knowledge
← Incident database

mie-school-form-exposure-2026 · Disclosed 2026-07-22

三重県立久居農林高等学校: data exposure and authorization boundaries

A staff configuration change exposed other applicants’ information to all form respondents. Names, emails and school information for 229 applicants were accessible.

Configuration / exposure

Outcome: Exposure / potential leak. Third-party theft unconfirmed.

Entry path and evidence

  • Reported fact

    A staff configuration change exposed other applicants’ information to all form respondents.

    [s1]§§1-5
  • Reported fact

    Names, emails and school information for 229 applicants were accessible.

    [s1]§§1-5

Timeline

  1. Event date reported by the source. [s1]

  2. Disclosure date established by the reviewed notice. [s1]

Reported response

  • Reported fact

    The form was suspended, permissions fixed and affected people and schools notified.

    [s1]§§1-5

Evidence relevant to prevention

Operational controls to inspect

Inspect the disclosed configuration, authorization or operational issue. Verify applicability and retain evidence of behavior after remediation.

Editorial assessment; not a determination of liability. [s1]

Unknowns and AI involvement

AI involvementUnknown

The reviewed disclosures do not establish attacker use of AI.

Actual unintended access remains unconfirmed; the incident involved a mistaken editing setting rather than reported external intrusion.

Sources

  1. [s1] 三重県立久居農林高等学校 · Primary source

    三重県立久居農林高等学校：事故に関する公表資料 ↗

    Reviewed 2026-10-09